Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/9bf1544b-0e9d-317d-9cc7-e389479204f4.roa
File:                     9bf1544b-0e9d-317d-9cc7-e389479204f4.roa (raw, json)
Hash identifier:          1aV+xcItgrMffsSdYuCaLXsTf7pFHOAA2/o30nFHCcY=
Subject key identifier:   14:B1:7C:AC:77:5A:1E:41:6D:19:72:C7:2D:29:38:AF:F7:08:F0:8D
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F4328584EC7A1C897A73AE74B68BB9F00
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/9bf1544b-0e9d-317d-9cc7-e389479204f4.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     36321
IP address blocks:        199.83.232.0/23 maxlen: 23
                          199.83.232.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c8:97:a7:3a:e7:4b:68:bb:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=536c68ed-3151-475e-8ebc-68ab7534346b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6b:93:59:cc:c7:48:13:37:e2:7d:63:ab:8b:
                    fa:d6:d0:b9:5e:aa:73:eb:df:69:12:e4:09:dd:e8:
                    cc:c1:a3:0f:14:f3:ad:89:13:55:68:80:7a:72:8f:
                    6f:bf:05:06:08:95:2b:7c:a6:99:85:fa:79:f4:7a:
                    d3:e3:0e:3c:c2:8e:f2:b9:0d:4e:40:81:cf:8c:79:
                    09:e7:40:7e:cf:46:67:51:60:3d:d8:5e:ad:f9:8a:
                    40:04:17:32:74:9c:e2:ac:68:4a:fa:08:07:33:de:
                    b5:cd:16:fe:01:51:4b:42:01:56:77:6d:f3:19:2f:
                    4d:75:7a:73:53:83:16:51:ef:2f:b3:b2:23:2e:aa:
                    c0:0b:a7:cf:d8:53:19:3e:fe:df:1f:13:f6:fb:b6:
                    32:bb:51:ca:03:0b:13:1b:60:51:53:ac:87:67:16:
                    e0:d5:6a:31:96:49:c5:ec:db:2f:40:73:89:3c:ea:
                    b1:0c:a1:2d:bb:7f:81:f6:ec:92:4a:66:5f:d8:e3:
                    df:99:4c:c0:27:71:82:a3:3b:73:94:62:f0:a9:0a:
                    f8:e9:e8:93:b4:ec:03:2d:fd:10:a6:57:a2:6b:5f:
                    fb:39:9a:a1:b7:50:30:59:f0:b2:9c:15:ed:20:b7:
                    5f:d1:93:c7:a6:64:db:f2:38:0d:19:2c:2a:a9:fd:
                    69:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B1:7C:AC:77:5A:1E:41:6D:19:72:C7:2D:29:38:AF:F7:08:F0:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/9bf1544b-0e9d-317d-9cc7-e389479204f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:fe:76:d7:7b:c4:e5:67:43:f5:63:65:2f:59:91:70:8e:ee:
         eb:25:ce:19:02:b8:77:78:ee:8e:e4:94:5a:7f:e9:7b:99:91:
         0f:30:59:41:b7:c6:c0:81:10:7c:14:18:f8:14:e8:6d:f9:70:
         c4:32:8c:21:06:52:01:9c:56:0c:67:22:be:08:54:cf:ea:72:
         0b:52:b1:68:ed:1d:ea:2e:f1:f6:ff:5c:c9:79:cf:45:da:92:
         94:a9:3c:f6:7d:c3:14:2c:f0:24:6d:0a:9b:a8:39:98:87:fc:
         46:13:44:7b:34:66:bb:2b:a9:63:c3:b5:2b:ff:e7:13:a9:07:
         21:01:0a:a7:65:73:34:bb:d3:ba:df:e2:4e:91:c7:39:72:9b:
         0d:08:df:06:b2:1f:92:e3:5a:4e:0f:1a:94:a4:12:68:98:6d:
         1f:c7:df:10:38:8a:99:68:9a:a9:3b:22:f7:05:ec:fa:15:71:
         be:56:b5:92:c0:e7:b6:7c:03:16:2a:e6:ac:fc:03:67:9b:90:
         b0:37:1d:04:37:e5:ab:9d:01:61:7f:98:a8:68:9c:5f:7d:3d:
         e5:69:dc:7b:82:ba:c6:66:b0:95:aa:8d:12:bf:09:41:97:d4:
         1e:75:db:a5:0e:aa:78:34:19:19:6c:18:5b:21:4e:22:3f:5d:
         c2:f8:3a:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HociXpzrnS2i7nwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQxZjc1ODEtNjkyYS00NjdlLWFlNzEtZDNjNDkyMWQw
NzY1MB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk
NTM2YzY4ZWQtMzE1MS00NzVlLThlYmMtNjhhYjc1MzQzNDZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GuTWczHSBM34n1jq4v61tC5Xqpz699pEuQJ
3ejMwaMPFPOtiRNVaIB6co9vvwUGCJUrfKaZhfp59HrT4w48wo7yuQ1OQIHPjHkJ
50B+z0ZnUWA92F6t+YpABBcydJzirGhK+ggHM961zRb+AVFLQgFWd23zGS9NdXpz
U4MWUe8vs7IjLqrAC6fP2FMZPv7fHxP2+7Yyu1HKAwsTG2BRU6yHZxbg1WoxlknF
7NsvQHOJPOqxDKEtu3+B9uySSmZf2OPfmUzAJ3GCoztzlGLwqQr46eiTtOwDLf0Q
pleia1/7OZqht1AwWfCynBXtILdf0ZPHpmTb8jgNGSwqqf1poQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBSxfKx3Wh5BbRlyxy0pOK/3CPCNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDFm
NzU4MS02OTJhLTQ2N2UtYWU3MS1kM2M0OTIxZDA3NjUvOWJmMTU0NGItMGU5ZC0z
MTdkLTljYzctZTM4OTQ3OTIwNGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQxZjc1ODEtNjkyYS00NjdlLWFl
NzEtZDNjNDkyMWQwNzY1LzVkMWY3NTgxLTY5MmEtNDY3ZS1hZTcxLWQzYzQ5MjFk
MDc2NS5jcmwwHwYDVR0jBBgwFoAU/E+wVT9F4ouBttKQsjS83QRwJYYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDFmNzU4MS02OTJhLTQ2N2UtYWU3MS1kM2M0
OTIxZDA3NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx1PoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHb+dtd7xOVnQ/VjZS9ZkXCO7uslzhkCuHd47o7klFp/6XuZkQ8wWUG3
xsCBEHwUGPgU6G35cMQyjCEGUgGcVgxnIr4IVM/qcgtSsWjtHeou8fb/XMl5z0Xa
kpSpPPZ9wxQs8CRtCpuoOZiH/EYTRHs0ZrsrqWPDtSv/5xOpByEBCqdlczS707rf
4k6Rxzlymw0I3wayH5LjWk4PGpSkEmiYbR/H3xA4iplomqk7IvcF7PoVcb5WtZLA
57Z8AxYq5qz8A2ebkLA3HQQ35audAWF/mKhonF99PeVp3HuCusZmsJWqjRK/CUGX
1B5126UOqng0GRlsGFshTiI/XcL4Ous=
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:31:22 2026 by rpki-client